git: 101d78aa1606 - main - dns/knot-resolver: Update 5.7.5 => 5.7.6 (security fixes)
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Mon, 04 Aug 2025 12:49:45 UTC
The branch main has been updated by vvd:
URL: https://cgit.FreeBSD.org/ports/commit/?id=101d78aa16063a5fae120e901383e064e5f54f91
commit 101d78aa16063a5fae120e901383e064e5f54f91
Author: Michael Grimm <trashcan@ellael.org>
AuthorDate: 2025-08-04 12:44:39 +0000
Commit: Vladimir Druzenko <vvd@FreeBSD.org>
CommitDate: 2025-08-04 12:49:21 +0000
dns/knot-resolver: Update 5.7.5 => 5.7.6 (security fixes)
Security
--------
- DoS: fix a rare segfault in `resolve` function (!1720)
Someone controlling the DNS traffic might be able
to trigger this crash intentionally and too often.
- DoS: drop a wrong assertion/crash (!1721)
Someone controlling the DNS traffic will most likely be able
to trigger this crash intentionally and too often.
Changelog:
https://gitlab.nic.cz/knot/knot-resolver/raw/v5.7.6/NEWS
- Modify MASTER_SITES in Makefile, see:
https://lists.nic.cz/hyperkitty/list/knot-resolver-users@lists.nic.cz/thread/H3M2A7NJR6MHRU53MW7P4SW2IWY4QX74/
- Move cmake from BUILD_DEPENDS to USES.
PR: 288586
Approved by: Leo Vandewoestijne <freebsd@dns.company> (maintainer)
MFH: 2025Q3
---
dns/knot-resolver/Makefile | 8 +++-----
dns/knot-resolver/distinfo | 6 +++---
2 files changed, 6 insertions(+), 8 deletions(-)
diff --git a/dns/knot-resolver/Makefile b/dns/knot-resolver/Makefile
index 5882e8190f7f..bc9d44a9f856 100644
--- a/dns/knot-resolver/Makefile
+++ b/dns/knot-resolver/Makefile
@@ -1,8 +1,7 @@
PORTNAME= knot-resolver
-DISTVERSION= 5.7.5
-PORTREVISION= 1
+DISTVERSION= 5.7.6
CATEGORIES= dns
-MASTER_SITES= https://secure.nic.cz/files/knot-resolver/ \
+MASTER_SITES= https://knot-resolver.nic.cz/release/ \
https://dns.company/downloads/knot-resolver/
MAINTAINER= freebsd@dns.company
@@ -13,7 +12,6 @@ LICENSE= GPLv3+
LICENSE_FILE= ${WRKSRC}/COPYING
BUILD_DEPENDS= bash:shells/bash \
- cmake:devel/cmake-core \
flake8:devel/py-flake8@${PY_FLAVOR} \
lua51-cqueues>=20200726_1:devel/lua-cqueues@lua51 \
luacheck:devel/lua-luacheck
@@ -26,7 +24,7 @@ LIB_DEPENDS= libdnssec.so:dns/knot3 \
libzscanner.so:dns/knot3
RUN_DEPENDS= lua51-cqueues>=20200726_1:devel/lua-cqueues@lua51
-USES= compiler:c11 libedit luajit meson ncurses ninja \
+USES= cmake:indirect compiler:c11 libedit luajit meson ncurses ninja \
pkgconfig python:build shebangfix tar:xz
USE_CXXSTD= c++11
USE_RC_SUBR= krescachegc kresd
diff --git a/dns/knot-resolver/distinfo b/dns/knot-resolver/distinfo
index 8ebd0e07bcb2..767cd1677285 100644
--- a/dns/knot-resolver/distinfo
+++ b/dns/knot-resolver/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1746521207
-SHA256 (knot-resolver-5.7.5.tar.xz) = 80239cf9aa92599d9cbad4642dea5520b2ccfbc9c6f968886ea46179cb3cdf66
-SIZE (knot-resolver-5.7.5.tar.xz) = 1924960
+TIMESTAMP = 1754049379
+SHA256 (knot-resolver-5.7.6.tar.xz) = 500ccd3a560300e547b8dc5aaff322f7c8e2e7d6f0d7ef5f36e59cb60504d674
+SIZE (knot-resolver-5.7.6.tar.xz) = 1924840